4.3 Spread Spectrum, Modulation and MCS

CWNA Certified Wireless Network Administrator CWNA-109

Track your progress as you read

Finished sections get a check mark.

1 Introduction & Exam Overview

1.1 Current Exam Facts 1.2 CWNA-109 Knowledge Domains and Study Strategy

2 RF Fundamentals

2.1 RF Waves, Propagation, Gain and Loss 2.2 Reflection, Multipath, VSWR and Free-Space Path Loss 2.3 RF Units and the Rule of 10s and 3s

3 RF Measurement and Antenna Systems

3.1 Noise Floor, SNR, RSSI and EIRP 3.2 Line of Sight, Fresnel Zone, Polarization and MIMO 3.3 Antenna Types, Charts, Cables and Lightning Protection

4 Industry Bodies and Legacy PHY

4.1 Industry Organizations and OSI Layers 4.2 Legacy 802.11 PHY Standards 4.3 Spread Spectrum, Modulation and MCS

5 Modern 802.11 PHY and Channel Concepts

5.1 Wi-Fi 4 HT and Wi-Fi 5 VHT 5.2 Wi-Fi 6 and Wi-Fi 6E High Efficiency 5.3 Primary Channels, OBSS, Throughput and Guard Interval

6 Spectrum Rules and WLAN Use Cases

6.1 Frequency Bands, DFS and Transmit Power Control 6.2 WLAN, Bridging, Peer-to-Peer and Mesh

7 802.11 Service Sets and Framing

7.1 Stations, BSS, ESS and the Distribution System 7.2 MSDU, MPDU, PSDU, PPDU and Aggregation 7.3 MAC Frame Format and Addressing

8 Frame Types, Discovery, and Association

8.1 Management, Control and Data Frames 8.2 Scanning, Authentication and Association

9 Channel Access, MAC Operations, and Devices

9.1 DCF, EDCA, RTS/CTS and Interframe Spaces 9.2 Roaming, Power Save and Protection Mechanisms 9.3 Access Points, Controllers and Client Devices

10 PoE, Architectures, and Proprietary Features

10.1 Power over Ethernet, PSE and Power Budgets 10.2 Centralized vs Distributed Forwarding and Network Planes 10.3 Airtime Fairness, Band Steering and RRM

11 WLAN Design and Supporting Services

11.1 Data, Voice, Video and Legacy Client Design 11.2 High-Density, Location Services and Guest Access 11.3 DHCP, DNS, Time, VLANs and AAA

12 WLAN Security

12.1 Weak and Deprecated WLAN Security 12.2 AES, WPA2-Personal and WPA2-Enterprise 12.3 WPA3, SAE and Opportunistic Wireless Encryption 12.4 PMF, Fast Roaming, WIPS and Secure Management

13 RF Validation Surveys and Tools

13.1 Post-Implementation Validation Surveys 13.2 Application and Performance Testing 13.3 Validation Tools: Survey, Protocol and Spectrum

14 Interference, Troubleshooting, and Common Faults

14.1 Co-Channel Contention vs Adjacent Channel Interference 14.2 Protocol Analyzers, Spectrum Analyzers and Monitoring 14.3 Common WLAN Faults and Hidden Nodes

4.3 Spread Spectrum, Modulation and MCS

Key Takeaways Explain This Topic AI

DSSS spreads each data bit across many chips; original 802.11 uses an 11-chip Barker sequence at 1 and 2 Mbps.

OFDM splits a 20 MHz channel into many orthogonal subcarriers so each symbol can be long enough to tolerate multipath.

OFDMA in Wi-Fi 6 assigns Resource Units (RUs) so multiple stations can share one PPDU by subchannel.

BPSK carries 1 bit per symbol and QPSK carries 2; 16/64/256/1024-QAM carry 4, 6, 8, and 10 bits and need higher SNR as order rises.

MCS is the index that jointly selects modulation and coding; 1024-QAM is Wi-Fi 6, while 4096-QAM is Wi-Fi 7 and is not a CWNA-109 objective.

Last updated: September 2026

On Harborline's freezer dock the RF path is ugly: metal racks, frost, and a moving forklift. On the mezzanine office the same SSID looks clean. Both clients may be associated; they are not using the same modulation. CWNA-109 objective 2.3 asks you to understand spread spectrum technologies and Modulation and Coding Schemes (MCS) : DSSS, OFDM, OFDMA and Resource Units, BPSK, QPSK, and QAM at 16, 64, 256, and 1024. This section introduces those building blocks. Deep 802.11ax scheduler behavior stays light. 802.11n/ac/ax rate tables in full are the next chapter. 4096-QAM is a Wi-Fi 7 / 802.11be topic and is not a CWNA-109 objective — know that so you can throw it out of a distractor list.

DSSS (2.3.1)

Direct Sequence Spread Spectrum multiplies the data stream by a faster chip sequence so the transmitted energy occupies a much wider bandwidth than the information rate alone would suggest.

Original 802.11 DSSS uses an 11-chip Barker sequence at 11 million chips per second . At 1 Mbps each data bit becomes 11 chips (DBPSK). At 2 Mbps, DQPSK carries two bits per symbol on the same chip clock. Processing gain is about 10 log10(11) ≈ 10.4 dB relative to unspread 1 Mbps in the same noise density — a textbook reason DSSS can still decode when a narrow interferer sits inside the 22 MHz-class footprint.

HR-DSSS keeps the spread-spectrum idea but switches the 5.5/11 Mbps rates to CCK codes. You still have chips, a wide 2.4 GHz emission, and robustness that OFDM at 54 Mbps will not match at the same RSSI. You do not have OFDM subcarriers.

Harborline's 802.11b scanners are DSSS/CCK devices. When a Bluetooth hopper or a non-Wi-Fi 2.4 GHz interferer appears, those scanners may keep a 1 or 2 Mbps link while an OFDM laptop on the same channel has already given up on 64-QAM. Spread spectrum is not magic immunity; it is a different trade of spectral efficiency for robustness.

OFDM (2.3.2)

Orthogonal Frequency Division Multiplexing slices a channel into many slow, overlapping-but-orthogonal subcarriers. 802.11a/g 20 MHz OFDM uses a 64-point FFT with 48 data + 4 pilot subcarriers. Each subcarrier carries BPSK, QPSK, 16-QAM, or 64-QAM. A long-guard-interval symbol is 4 µs: 3.2 µs of useful FFT time plus a 0.8 µs cyclic prefix (guard interval) copied from the end of the symbol.

Why administrators care: multipath . In a warehouse the same PPDU arrives on several delayed paths. A single-carrier high-rate waveform (fast chips or a very short symbol) smears into the next symbol (inter-symbol interference). OFDM makes each symbol long compared with typical indoor delay spread, and the cyclic prefix absorbs the echo. That is why 802.11a/g can run 54 Mbps in environments where pushing DSSS past 11 Mbps was the end of the road.

In legacy OFDM , one PPDU typically belongs to one transmitter occupying the entire 20 MHz (or later 40/80 MHz) for that frame. Multi-user splitting of the frequency resource inside one PPDU is the next subsection, not 802.11a.

OFDMA and Resource Units (2.3.3)

Orthogonal Frequency Division Multiple Access (OFDMA) is the Wi-Fi 6 (802.11ax) multi-user version of OFDM. Instead of giving the whole channel to one station for the whole PPDU, the AP schedules subsets of tones — Resource Units (RUs) — to different stations in the same transmission opportunity.

Think of a 20 MHz HE channel as a set of tones the AP can group:

• RU size (tones) Role in a 20 MHz HE channel (conceptual)
• 26 Smallest commonly discussed RU; up to nine 26-tone RUs in 20 MHz
• 52 Two 26-tone units grouped
• 106 Larger share of 20 MHz
• 242 Essentially the full 20 MHz

Forty, eighty, and 160 MHz HE channels add larger RUs (484, 996, and combinations). You do not need to memorize every 802.11ax RU map for CWNA-109. You do need the idea: an RU is a scheduled subchannel , and OFDMA is multi-user subchannelization .

Downlink OFDMA: the AP builds one PPDU that carries different clients' data on different RUs. Uplink OFDMA: the AP sends a Trigger frame so those clients transmit on their assigned RUs at the same time, with matching timing and transmit power so the AP can decode the composite.

Harborline's office SSID has dozens of email and browser clients, each sending tiny frames. Classic OFDM wastes airtime because each small MSDU still pays a full contention plus a full-width preamble. OFDMA can pack several of those clients into one HE PPDU. The freezer's single 802.11b scanner cannot participate in OFDMA; it is a DSSS/CCK STA. Mixing that scanner onto an HE SSID is a design problem for a later chapter, not a reason to pretend RUs exist in 802.11b.

Keep 802.11ax details light here: BSS coloring, Target Wake Time, 1024-QAM as a modulation (next), and full HE MCS tables are not the point of 2.3.3. The point is OFDMA = many users, many RUs, one PPDU .

Loading diagram... Legacy OFDM vs Wi-Fi 6 OFDMA Resource Units

Bits per symbol on one subcarrier (CWNA-109 QAM set)

BPSK (2.3.4)

Binary Phase Shift Keying uses two constellation points, typically 180 degrees apart. Each symbol carries 1 bit . It is the most robust of the exam's PSK/QAM set: the receiver only has to decide which of two phases arrived. Noise has to be large before it pushes a point across the decision boundary.

You meet BPSK as the 6 Mbps (rate 1/2) and 9 Mbps (rate 3/4) 802.11a/g OFDM rates, as MCS 0 style operation on later PHYs (BPSK with 1/2 coding), and as DBPSK on 1 Mbps DSSS. Beacon frames and other management traffic are often sent at a low mandatory rate so that the most distant STA can still demodulate them. Harborline's far-aisle scanner that only holds BPSK is not broken; it is at the edge of SNR.

QPSK (2.3.5)

Quadrature Phase Shift Keying uses four phases. Each symbol carries 2 bits . Decision regions are tighter than BPSK, so QPSK needs a better SNR than BPSK for the same error rate, but it doubles bits per symbol.

OFDM 12 Mbps is QPSK rate 1/2; 18 Mbps is QPSK rate 3/4. Original 802.11 2 Mbps DSSS uses DQPSK. QPSK is the usual next step up from BPSK when Harborline's mezzanine path improves but 16-QAM still retries.

QAM — 16, 64, 256, 1024 (2.3.6)

Quadrature Amplitude Modulation encodes bits in both phase and amplitude. The constellation is a grid. Density is the exam idea:

• Modulation Bits per symbol Typical first appearance in 802.11
• 16-QAM 4 802.11a/g (24 and 36 Mbps)
• 64-QAM 6 802.11a/g (48 and 54 Mbps); HT MCS up through 7
• 256-QAM 8 VHT / Wi-Fi 5
• 1024-QAM 10 HE / Wi-Fi 6
• 4096-QAM 12 Wi-Fi 7 / 802.11be — not a CWNA-109 objective

Higher-order QAM needs higher SNR. Points sit closer together. The same noise vector that was harmless to BPSK can throw a 1024-QAM symbol into the wrong bin. That is why 1024-QAM shows up near the AP under the Harborline mezzanine and disappears in the freezer aisle even when RSSI still looks acceptable on a phone widget. RSSI is not SNR; noise floor and EVM matter. You will quantify SNR in Domain 1; here, remember the ranking: BPSK < QPSK < 16-QAM < 64-QAM < 256-QAM < 1024-QAM in SNR demand.

Coding is the other half of robustness. A rate 1/2 code sends one redundancy bit per data bit; rate 5/6 sends little redundancy. The same 64-QAM constellation is more fragile at rate 5/6 than at rate 1/2. MCS exists because modulation and coding are chosen together .

MCS — the index that combines modulation and coding (2.3)

A Modulation and Coding Scheme (MCS) is an index into a table that jointly specifies:

• constellation (BPSK, QPSK, 16-QAM, 64-QAM, 256-QAM, 1024-QAM)
• coding rate (1/2, 2/3, 3/4, 5/6, and HE additions such as DCM in some MCS)

Legacy 802.11a/g advertised named rates (6 through 54) instead of MCS numbers, but the pairing was already there: 24 Mbps is 16-QAM at rate 1/2, not a different radio. HT (802.11n) made the MCS index explicit (MCS 0–7 for one spatial stream in the original HT set). VHT and HE extend the tables (including 256-QAM and 1024-QAM). Channel width, guard interval, and spatial stream count then convert an MCS into a PHY data rate. Those multipliers are later PHY sections; the Domain 2.3 sentence you must own is: MCS = modulation + coding, selected as one index.

Example you can reconstruct without a poster: HT MCS 0 is BPSK rate 1/2 (most robust single-stream HT). HT MCS 7 is 64-QAM rate 5/6 (fastest single-stream 20 MHz HT without the optional 256-QAM of later PHYs). If SNR falls, the client and AP rate-shift to a lower MCS. That is not a different SSID; it is the same BSS choosing a more robust row in the table.

Exam traps for 2.3

DSSS chips are not OFDM subcarriers. Do not say 802.11b uses 48 data tones.

OFDMA Resource Units are a Wi-Fi 6 multi-user frequency split, not a new name for 802.11a 20 MHz.

1024-QAM is Wi-Fi 6 . 4096-QAM is Wi-Fi 7 and is outside CWNA-109.

MCS is not channel width and is not the number of spatial streams. Those multiply the MCS row; they are not the row.

Independent ExamFinch study for objective 2.3 stops at that map: spread (DSSS), multiplex in frequency (OFDM), multi-user subchannels (OFDMA/RUs), constellations (BPSK through 1024-QAM), SNR cost of dense QAM, and MCS as the combined index.